Masque Attack iOS

[CaliJL]

"Masque Attack works by luring users to install an app outside of the iOS App Store, by clicking a phishing link in a text message or email. For example, in a demo video, an SMS message with a link attached was sent with the following text "Hey, check this out, the New Flappy Bird."

Once clicked, the link directs to a website, which prompts the user to install an app. The app in the video isn't Flappy Bird, but a malicious version of Gmail that installs directly over the legitimate version of Gmail downloaded from the App Store, making it virtually undetectable."

 

 

http://forums.macrumors.com/showthread.php?t=1817070

 

"Quote:

Masque Attacks can pose much bigger threats than WireLurker. Masque Attacks can replace authentic apps,such as banking and email apps, using attacker's malware through the Internet. That means the attacker can steal user's banking credentials by replacing an authentic banking app with an malware that has identical UI. Surprisingly, the malware can even access the original app's local data, which wasn't removed when the original app was replaced. These data may contain cached emails, or even login-tokens which the malware can use to log into the user's account directly."

 

Just like the Wirelurker malware, we should be seeing a response from Apple in no time.

[qwertywarrior]

Masque Attack can be used to install fake versions of apps over legitimate App Store versions using iOS enterprise provision profiles, which are used for beta testing or by companies to distribute apps to employees without the need for the official App Store.

 

 

 

this isnt the first time ive seen this method abused before

[Raboo]

This is not good.

[Dietrichw]

this isnt the first time ive seen this method abused before

That was how we were able to use gameboy emulators on iOS without jailbreaking.

[qwertywarrior]

That was how we were able to use gameboy emulators on iOS without jailbreaking.

wow thats pretty cool

[Dr. Dino]

That's actually pretty cool! Illegal and immoral, but cool!

[StingBull]

I didn't know there was a way to install apps on iOS outside of App Store without jailbreaking.